Profile

Cover photo
Marc Schiffbauer
110,426 views
AboutPostsPhotosVideos+1's

Stream

Marc Schiffbauer

Shared publicly  - 
 
 
Not pretty. However the bigger problem is not the obvious one. There will be patches very soon for all the usual Linux platforms (or roll your own RPM it's not hard). However guess what many of those cheap GPL violating no source code ADSL routers that never get firmware upgrades run for their own internal use and to masquerade DNS.

Oh dear..

And that is why source code to your infrastructure is so important. This bug just obsoleted a pile of low end crapware router and firewall boxes holding homes, businesses and government together.

You can upgrade all your servers but if that little cheapo plastic box on your network somewhere has a vulnerable post 2008 glibc and ever does DNS lookups chances are it's the equivalent of a trapdoor into your network.

Even more fun of course - some of them regularly do poll some hardcoded DNS address so if anyone takes over that DNS record and starts serving a suitably compromised record back ...

https://googleonlinesecurity.blogspot.co.uk/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html
42 comments on original post
1
Add a comment...

Marc Schiffbauer

Shared publicly  - 
1
Add a comment...

Marc Schiffbauer

Shared publicly  - 
 
Bei Kunden, die Ihre Büros weit oben in recht hohen Gebäuden haben, lässt sich unsere dortige Anwesenheit auch per #Barograph bestimmen :-)
 ·  Translate
1
Patrick Koetter's profile photo
 
22ter Stock
Add a comment...

Marc Schiffbauer

Shared publicly  - 
1
Add a comment...

Marc Schiffbauer

Shared publicly  - 
 
Modoboa 1.0.0 has just been released! Try it if you want to manage your Mail accounts with ease.
1
Add a comment...

Marc Schiffbauer

Shared publicly  - 
1
Patrick Koetter's profile photo
 
Trotzdem haben die kranke Preise. :-/
 ·  Translate
Add a comment...

Marc Schiffbauer

Shared publicly  - 
 
Gute Idee! Mit Werbemitteln Obdachlose unterstützen. Was DU tun musst? Nur dieses Video für min. 30sek ansehen.
 ·  Translate
1
Add a comment...

Marc Schiffbauer

Shared publicly  - 
 
 
Nochmal: Hilfe für Nepal!
Meine Frau hat seit vielen Jahren ein Patenkind in Nepal und mit der Organisation nur gute Erfahrungen gemacht. Eine der Gründerinnen ist derzeit zufällig vor Ort und hat ihr auf die Frage nach Hilfe folgende erschütternde Nachricht geschickt:

Bon hier in nepal!
Lage furchtbarer als im tv
Sind gesund
Suchen Kinder 
70% häuser schutt
Schule steht, schulleiter auch haus weg
Familie wenig verletzt
Brauchen wasser, glukose, ect.
Können es 200 km ausserhalb von ktm kaufen.... haha
Haben teufelsritt von 17 std. Fahrt gemacht, nicht leistbar
Wenn Hilfe, dann spende auf unser konto
Brauchen geld, preise steigen für wasser ect.
Haben klaren kopf, trotz chaotischer schreibweise
Sind ausserhalb von ktm, internet!
Danke....beten, bitte!
Ab morgen Vollzeit in ktm!
Om stark erschöpft
Alle traumatisiert 
Wir aber haben kraft!!!!

Wer etwas spenden kann und will, für den ist das eine der Möglichkeiten, einer zuverlässigen Organisation direkt vor Ort zu helfen (natürlich auch ohne Patenschaft). Bitte gerne auch weiterverbreiten!

Kontodaten:
Postbank Frankfurt
Förderverein Patenkinder Nepal e.V.
IBAN: DE 0650 0100 6003 0231 2601
BIC: PBNKDEFF

Weitere Infos über die Organisation und Möglichkeiten für längerfristige Unterstützung findet sich hier: http://www.patenkinder-nepal.de
 ·  Translate
View original post
1
1
Add a comment...

Marc Schiffbauer

Shared publicly  - 
 
 
Ein Paar Dinge, die ebenfalls mit TTIP kommen werden, neben den verchlorten internationalen Schiedsgerichten.

Quelle:  https://cms.fightforthefuture.org/ronwyden/
 ·  Translate
Tinypic™ is a photo and video sharing service that allows you to easily upload, link and share your images and videos on MySpace®, eBay®, blogs and message boards. No account required, upload your photos and videos today!
View original post
1
Add a comment...

Marc Schiffbauer

Shared publicly  - 
 
Another example where grsec protects you where upstream aslr does not...
“Yet another upstream ASLR flaw that doesn't apply to grsec/PaX: http://t.co/e3PPRUHJvI We avoid the entire vulnerable function”
1
Add a comment...

Marc Schiffbauer

Shared publicly  - 
 
Heute gefunden :-)
 ·  Translate
1
Add a comment...

Marc Schiffbauer

Shared publicly  - 
 
Happy Easter!
We just released #automx   version 0.9.2

New tarball will be available on the homepage soon.
1
Add a comment...
Basic Information
Gender
Male
Marc Schiffbauer's +1's are the things they like, agree with, or want to recommend.
Skype - free IM & video calls
market.android.com

Say “hello” to friends and family with an instant message, voice or video call on Skype for free. Join the millions of people using Skype to

Titanium Backup ★ root
market.android.com

EXTREMELY powerful tool. Backup ALL apps, Market links, remove bloatware & MORE! ☆Over 2.6 million users, 23+ languages! ☆Needs ROOT, fo

AccuWeather for Android - Apps on Android Market
market.android.com

AccuWeather for Android, your source for accurate and localized weather. AccuWeather for Android has all of the accurate and localized weath

Prank Mirror
market.android.com

Laugh at yourself, friends, and family all IN REAL TIME. Prank Mirror gives you a variety of hilarious picture options. Prank Mirror is ho

GPS Widget Pro
market.android.com

This widget simply shows your current location in numbers. GPS coordinates are received from the GPS location provider or from the network l

Exim
plus.google.com

The Exim Mail Transfer Agent

OsmAnd+
market.android.com

Osmand is opensource navigation application with raster/vector maps Osmand+ (OSM Automated Navigation Directions) Osmand is opensource navig

Contact Remover
market.android.com

Small tool to let you delete multiple contacts. Select one, many, or all. Search to identify contacts to delete. Touch to show contact d

GoodNews (Google Reader | RSS)
market.android.com

Your favorite RSS/atom newsreader and audio podcast player for google reader GoodNews is a brand new and freely available Google Reader clie

adidas miCoach
market.android.com

Put your coach in the palm of your hand. Put your coach in the palm of your hand. GPS and real time audible coaching keep you going past you